mdnsresponder and configd

Everytime I boot up now I recieve these annoying messages that say
[QUOTE]Do you want the application "configd" to accept incoming network connections[/QUOTE]
and
[QUOTE]Do you want the application "mdnsresponder" to accept incoming network connections[/QUOTE]

If I click on deny on both I have no inernet connection. Also if I go to System Preferences and set my Firewall to "receive all incoming connections" essentually turning my firewall off these messages stop occuring on reboot.
I think this all happened after trying to recalibrate my MBP battery but I am not sure. When I installed Leopard over a month ago I did a fresh install and all was fine, until recently.
Anyone have any ideas?

15" Macbook Pro 2.4, Mac OS X (10.5.1), AEBS

Posted on Dec 29, 2007 10:27 AM

Reply
90 replies

Apr 20, 2008 8:17 AM in response to WendySH

I seem to be having the same issue as everyone else in particular just like dhowell626 I have just got my computer back from repair in the UK. The repair was to replace the entire outer casing (ie should not have impacted any software but I know they ran various diagnostic tests for good measure - they said 5 hours of tests).

When I switched on my MacBook Pro in the shop to check everything was OK I immediately started getting exactly the same symptoms: windows asking whether I wanted to allow or deny connection by configd and mDNSResponder, failure to connect to network with self assigned IP address, a new program called nmdb showing on the allowed list on my firewall. I had never experienced any of these problems before. Inspecting the log at the time when internet access was blocked shows that both configd and mDNSResponder were blocked at the same time as I was unable to get online. There does seem to be a strong connection here.

The Genius at the Mac store at first tried to deny it could be anything to do with what they have done as it was just a hardware job. He then suggested I just turn off the firewall saying "it's not that vulnerable if you allow all incoming network communications". This is definitely NOT my understanding and any quick research online will show the perils of switching off firewalls and I pointed this out. The Genius has agreed to take the machine back in again to replace the casing again (the new one was warped) and also to fix this problem. He thought a reinstallation of some part of the system would be needed to fix this problem.

In the meantime I have tried out the solution suggested by Heinrich with specific details supplied by lstnmysphr in this thread. Thank you very much for these suggestions; I could follow them and they seem to be working and this has enabled me to have the firewall up but specifically allowing config and mDNSResponder. I must say I am still unhappy about this. If nothing else, I did not need to do this before my Mac was taken in for repair and I am worried maybe other things have gone wrong as yet undiscovered. I shall therefore still be asking the Apple store to effect a proper repair of this issue that aparently was (most likely inadvertently) caused during their repair work.

Incidentally, the potential solution suggested by Simon69 did not match my symptoms. com.apple.kerberos.kdc and com.apple.systemdefault were both in my keychain.

I note in http://docs.info.apple.com/article.html?artnum=306938 where Mac describe the updated firewall, they describe configd, mDNSResponder and a third service called racoon as being the only 3 "essential services" that continue to be permitted even under firewall option 2 ("Allow only essential services"). It suggests there is some glitch in the special permissions given to these services by the firewall, triggered maybe by battery resets, system time resets, or something else that happens when Macs are repaired and their casings are interfered with/replaced:

+2. Allow only essential services:+

+This is the most conservative mode. Mac OS X will block all connections except a limited list of services essential to the operation of your computer.+

+The system services that are still allowed to receive incoming connections are:+

+configd, which implements DHCP and other network configuration services+
+mDNSResponder, which implements Bonjour+
+racoon, which implements IPSec+

Given the very high number of visits to this thread (albeit limited posts there are nearly 2,000 viewings already) I suspect lots of people are having this problem. It seems to be relatively recent and may be connected to the updates to Leopard that modified the firewall, or at least the descriptions of the firewall options.

It would therefore be great to see Apple address this issue, give us some clarification and potentially release a bug fix. For those of us who have applied these patches, please let us know whether we've done the right thing and/or should take any further action.

Charles

[This issue also seems to be connected to a posting in the Mac OS » Mac OS X v10.5 Leopard » Getting Online and Networking forum Re: Self Assigning IP Issue although I do not think that thread adds much additional to the discussion in this thread. One common theme may be around resetting system dates. Replacing batteries evidently does this and it's possible certain repairs or diagnostics done by Apple repairers may do something similar too.]

May 6, 2008 6:15 AM in response to Charles G

The above post by Michael St.


"I had a similar problem, with configd (and hence, DHCP and all networking) not working unless the firewall was set to allow all incoming connections.

Reconfiguring the kerberos certificates as specified in http://support.apple.com/kb/TS1245 solved it."

May well provide an answer.

Alternatively navigate to:

Macintosh HD -> Library -> Preferences -> System configuration.

Here drag a copy of "com.apple.network.identification.plist" and "com.apple.smb.server.plist" to the desktop and then delete the originals.

Restart your computer (your mac will make a new version of this file) and you may find your problem is fixed.

This was recommended to me by an instore Apple genius.

Aug 25, 2009 8:33 PM in response to actuarius

Downloading and re-installing latest cominbation update works!

I just wanted to confirm the fix by theolog, as well as actuarius in the following post:

http://discussions.apple.com/thread.jspa?messageID=10033810

If you want to avoid copying files, doing plists, repairing permissions and all of that, download the latest MAC OSX Combination update and re-install it (or install it for the first time). This resets everything and when that first popup appears regarding incoming connection, ALLOW it and you should be good to go.

Sep 16, 2009 9:53 AM in response to SolRayz

A note from Apple in Mac OS X 10.5 Leopard: About the Application Firewall that might be related with the theory of the ad-hoc signature, as suggested by jamus j:

Some applications check their own integrity when they are run without using code signing. If the Application Firewall recognizes such an application it will not sign it, but then it will re-present the dialog every time the application is run.

Jan 3, 2008 12:32 PM in response to SolRayz

I have the same problem, just started a couple of days ago. Perhaps it was the last system update? I'm reluctant to let applications I can't recognize get through the firewall, so as a workaround I've been starting each session by allowing all connections in the firewall System Preferences panel, then restricting them once everything is up and running.

Feb 2, 2008 7:49 PM in response to SolRayz

I'm having this EXACT problem, since I got my Macbook back from Apple service Thursday for a hinge issue. As far as I know, all they did was fix the hinge, I don't know what they would have even done to any software. But this is the exact thing I'm getting, with the errors about mDNSResponder and configd, and I also had "nmdb" show up in the "good" list in my firewall. I'd really like to see some info on this issue, I don't like having my firewall off. I've never had any problem like this before.

Feb 20, 2008 1:58 PM in response to SolRayz

I was having this same annoyance/problem after resetting the PMU on my 15" Powerbook G4. I fixed it by deleting the keychain entry for my wireless network's encryption key. Naturally, the next time I connected to my wireless network I had to type in the encryption key, but I was not bothered with the "allow" or "deny" dialogs after rebooting. I hope this fix works for you guys too.

Mar 1, 2008 2:03 AM in response to dhowell626

I have half an answer, but have been unable to fix the problem myself.

I also just got my Macbook back from repair, and when it first started up the time needed setting as it had gone back to 2001 or something.

This is where my problems started.

I have had a good look around and discovered that some of the Keychains and certificates are now missing in the "System" area, whereas they were there before.

These are:
com.apple.kerberos.kdc and com.apple.systemdefault.

I have tried all sorts to export them from another machine, but can't figure out how to do it (maybe you're not supposed to be able to ?)

In the end, I decided to backup my files and reload everything from the DVD, this worked, but a little extreme.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

mdnsresponder and configd

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.